update named-checkzone manpage for SPF changes

diff --git a/bin/check/named-checkzone.8 b/bin/check/named-checkzone.8
index 957674cfcf627c97422d0516461de04a2a211fbf..2654582429031adac0d3feaa819176a0ce0b7d3f 100644 (file)
--- a/bin/check/named-checkzone.8
+++ b/bin/check/named-checkzone.8
@@ -238,7 +238,7 @@ so that include directives in the configuration file are processed as if run by
 .PP
 \-T \fImode\fR
 .RS 4
-Check if Sender Policy Framework records (TXT and SPF) both exist or both don't exist. A warning is issued if they don't match. Possible modes are
+Check if Sender Policy Framework (SPF) records exist and issues a warning if an SPF-formatted TXT record is not also present. Possible modes are
 \fB"warn"\fR
 (default),
 \fB"ignore"\fR.

diff --git a/bin/check/named-checkzone.docbook b/bin/check/named-checkzone.docbook
index db3344c646e135ac9a3377bd3f72656aefe4aaee..90e2263f822bb5c43d27d0795f1c135173e46b04 100644 (file)
--- a/bin/check/named-checkzone.docbook
+++ b/bin/check/named-checkzone.docbook
@@ -386,10 +386,10 @@
        <term>-T <replaceable class="parameter">mode</replaceable></term>
        <listitem>
          <para>
-           Check if Sender Policy Framework records (TXT and SPF)
-           both exist or both don't exist.  A warning is issued
-           if they don't match.  Possible modes are
-           <command>"warn"</command> (default), <command>"ignore"</command>.
+           Check if Sender Policy Framework (SPF) records exist
+           and issues a warning if an SPF-formatted TXT record is
+           not also present.  Possible modes are <command>"warn"</command>
+           (default), <command>"ignore"</command>.
          </para>
        </listitem>
       </varlistentry>

diff --git a/lib/dns/zone.c b/lib/dns/zone.c
index 5197c2de70e0851db283449add85312f7399e3b0..45b366c242325c6ed8fd9114bcb729d64e369530 100644 (file)
--- a/lib/dns/zone.c
+++ b/lib/dns/zone.c
@@ -2361,8 +2361,8 @@ integrity_checks(dns_zone_t *zone, dns_db_t *db) {
 
  checkspf:
                /*
-                * Check if there is a type TXT spf record without a type SPF
-                * RRset being present.
+                * Check if there is a type SPF record without an
+                * SPF-formatted type TXT record also being present.
                 */
                if (!DNS_ZONE_OPTION(zone, DNS_ZONEOPT_CHECKSPF))
                        goto next;